CVE-2026-74266

A flaw was found in the Linux kernel's sch_dualpi2 network scheduler. When the scheduler processes network packets, it can incorrectly manage its internal queue length. This mismanagement can lead to a system crash, making the system unavailable (Denial of Service).

This vulnerability is rated as Moderate impact because triggering the flaw requires local privileges to configure traffic control queuing disciplines and results exclusively in a denial of service via a kernel crash, without compromising confidentiality or integrity. Supported Red Hat Enterprise Linux releases are not affected as they do not ship the vulnerable scheduler code introduced in newer upstream kernels. Standard enterprise configurations do not enable this experimental packet scheduler by default, preventing unprivileged or remote exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.